Netgear Warns Routers have Easily Exploitable Security Vulnerability

Netgear Warns Routers have Easily Exploitable Security Vulnerability

Netgear has confirmed through a statement on their website that several routers, including the R7000, R6400 and the R8000, have a security issue that could allow someone to take control of your router with just one click of a malicious link.

“Netgear is aware of the security issue #582384 that allows unauthenticated web pages to pass form input directly to the command-line interface,” the statement reads. “A remote attacker can potentially inject arbitrary commands which are then executed by the system.”

The routers infected include several of Netgear’s most popular models, including the “Nighthawk” series. Netgear has tested and confirmed that the following models are vulnerable:

  • R6250
  • R6400
  • R6700
  • R7000
  • R7100LG
  • R7300
  • R7900
  • R8000

Netgear is working on a production firmware version that will fix this vulnerability, but it is still in beta. You can download the beta version from this link for the R6400, R7000 and the R8000.

“Netgear is continuing to review our entire portfolio for other routers that might be affected by this vulnerability,” the Netgear team said in the statement. “If any other routers are affected by the same security vulnerability, we plan to release firmware to fix those as well.”

Featured

New Products

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions.

  • Compact IP Video Intercom

    Viking’s X-205 Series of intercoms provide HD IP video and two-way voice communication - all wrapped up in an attractive compact chassis.

  • Automatic Systems V07

    Automatic Systems V07

    Automatic Systems, an industry-leading manufacturer of pedestrian and vehicle secure entrance control access systems, is pleased to announce the release of its groundbreaking V07 software. The V07 software update is designed specifically to address cybersecurity concerns and will ensure the integrity and confidentiality of Automatic Systems applications. With the new V07 software, updates will be delivered by means of an encrypted file.